cvelistv5 - cve-2007-3215

CVE-2007-3215 (GCVE-0-2007-3215)

Vulnerability from cvelistv5

Published

2007-06-14 22:00

Modified

2024-08-07 14:05

Severity ?

CWE

Summary

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

References

URL

Tags

	http://www.securityfocus.com/archive/1/471065/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.debian.org/security/2007/dsa-1315	vendor-advisory, x_refsource_DEBIAN
	http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/34818	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/25755	third-party-advisory, x_refsource_SECUNIA
	http://securityreason.com/securityalert/2802	third-party-advisory, x_refsource_SREASON
	http://osvdb.org/76139	vdb-entry, x_refsource_OSVDB
	http://www.securityfocus.com/bid/24417	vdb-entry, x_refsource_BID
	https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707	x_refsource_MISC
	http://osvdb.org/37206	vdb-entry, x_refsource_OSVDB
	http://www.vupen.com/english/advisories/2007/2267	vdb-entry, x_refsource_VUPEN
	http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/	x_refsource_MISC
	http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce	x_refsource_MISC
	http://secunia.com/advisories/25626	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/25758	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2007/2161	vdb-entry, x_refsource_VUPEN
	http://seclists.org/fulldisclosure/2011/Oct/223	mailing-list, x_refsource_FULLDISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:05:29.463Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20070611 PHPMailer command execution",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/471065/100/0/threaded"
          },
          {
            "name": "DSA-1315",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2007/dsa-1315"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://sourceforge.net/project/shownotes.php?release_id=517428\u0026group_id=157374"
          },
          {
            "name": "phpmailer-popen-command-execution(34818)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34818"
          },
          {
            "name": "25755",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25755"
          },
          {
            "name": "2802",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/2802"
          },
          {
            "name": "76139",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/76139"
          },
          {
            "name": "24417",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24417"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://sourceforge.net/tracker/index.php?func=detail\u0026aid=1734811\u0026group_id=26031\u0026atid=385707"
          },
          {
            "name": "37206",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/37206"
          },
          {
            "name": "ADV-2007-2267",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2267"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce"
          },
          {
            "name": "25626",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25626"
          },
          {
            "name": "25758",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/25758"
          },
          {
            "name": "ADV-2007-2161",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2161"
          },
          {
            "name": "20111005 vTiger CRM 5.2.x \u003c= Remote Code Execution Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://seclists.org/fulldisclosure/2011/Oct/223"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-06-11T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20070611 PHPMailer command execution",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/471065/100/0/threaded"
        },
        {
          "name": "DSA-1315",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2007/dsa-1315"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://sourceforge.net/project/shownotes.php?release_id=517428\u0026group_id=157374"
        },
        {
          "name": "phpmailer-popen-command-execution(34818)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34818"
        },
        {
          "name": "25755",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25755"
        },
        {
          "name": "2802",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/2802"
        },
        {
          "name": "76139",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/76139"
        },
        {
          "name": "24417",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24417"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://sourceforge.net/tracker/index.php?func=detail\u0026aid=1734811\u0026group_id=26031\u0026atid=385707"
        },
        {
          "name": "37206",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/37206"
        },
        {
          "name": "ADV-2007-2267",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2267"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce"
        },
        {
          "name": "25626",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25626"
        },
        {
          "name": "25758",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/25758"
        },
        {
          "name": "ADV-2007-2161",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2161"
        },
        {
          "name": "20111005 vTiger CRM 5.2.x \u003c= Remote Code Execution Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://seclists.org/fulldisclosure/2011/Oct/223"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3215",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070611 PHPMailer command execution",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/471065/100/0/threaded"
            },
            {
              "name": "DSA-1315",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2007/dsa-1315"
            },
            {
              "name": "http://sourceforge.net/project/shownotes.php?release_id=517428\u0026group_id=157374",
              "refsource": "CONFIRM",
              "url": "http://sourceforge.net/project/shownotes.php?release_id=517428\u0026group_id=157374"
            },
            {
              "name": "phpmailer-popen-command-execution(34818)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34818"
            },
            {
              "name": "25755",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25755"
            },
            {
              "name": "2802",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/2802"
            },
            {
              "name": "76139",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/76139"
            },
            {
              "name": "24417",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24417"
            },
            {
              "name": "https://sourceforge.net/tracker/index.php?func=detail\u0026aid=1734811\u0026group_id=26031\u0026atid=385707",
              "refsource": "MISC",
              "url": "https://sourceforge.net/tracker/index.php?func=detail\u0026aid=1734811\u0026group_id=26031\u0026atid=385707"
            },
            {
              "name": "37206",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/37206"
            },
            {
              "name": "ADV-2007-2267",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2267"
            },
            {
              "name": "http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/",
              "refsource": "MISC",
              "url": "http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/"
            },
            {
              "name": "http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce",
              "refsource": "MISC",
              "url": "http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce"
            },
            {
              "name": "25626",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25626"
            },
            {
              "name": "25758",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/25758"
            },
            {
              "name": "ADV-2007-2161",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2161"
            },
            {
              "name": "20111005 vTiger CRM 5.2.x \u003c= Remote Code Execution Vulnerability",
              "refsource": "FULLDISC",
              "url": "http://seclists.org/fulldisclosure/2011/Oct/223"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3215",
    "datePublished": "2007-06-14T22:00:00.000Z",
    "dateReserved": "2007-06-14T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:05:29.463Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2007-AVI-274

Vulnerability from certfr_avis

Une vulnérabilité dans la bibliothèque PHPMailer permet l'exécution de code arbitraire à distance.

Description

La librairie PHPMailer permet d'envoyer des courriers électroniques depuis une application PHP. Lorsqu'elle est configurée pour utiliser la commande sendmail, une vulnérabilité au niveau de la validation des champs saisis permet l'exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les applications utilisant la bibliothèque PHPMailer 1.7 configurée pour utiliser sendmail.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Debian 1315 du 19 juin 2007	None	vendor-advisory
Bulletin de sécurité Debian DSA 1315 du 20 juin 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes applications utilisant la  biblioth\u00e8que \u003cSPAN class=\"textit\"\u003ePHPMailer\u003c/SPAN\u003e 1.7 configur\u00e9e  pour utiliser \u003cSPAN class=\"textit\"\u003esendmail\u003c/SPAN\u003e.\u003c/p\u003e",
  "content": "## Description\n\nLa librairie PHPMailer permet d\u0027envoyer des courriers \u00e9lectroniques\ndepuis une application PHP. Lorsqu\u0027elle est configur\u00e9e pour utiliser la\ncommande sendmail, une vuln\u00e9rabilit\u00e9 au niveau de la validation des\nchamps saisis permet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-3215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3215"
    }
  ],
  "initial_release_date": "2007-06-20T00:00:00",
  "last_revision_date": "2007-06-20T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Debian DSA 1315 du 20 juin 2007 :",
      "url": "http://www.debian.org/security/2007/dsa-1315"
    }
  ],
  "reference": "CERTA-2007-AVI-274",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-06-20T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 dans la biblioth\u00e8que \u003cspan\nclass=\"textit\"\u003ePHPMailer\u003c/span\u003e permet l\u0027ex\u00e9cution de code arbitraire \u00e0\ndistance.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans PHPMailer",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Debian 1315 du 19 juin 2007",
      "url": null
    }
  ]
}

CERTA-2007-AVI-566

Vulnerability from certfr_avis

Plusieurs vulnérabilités ont été identifiées dans le gestionnaire de contenus Mambo. L'exploitation de ces dernières par le biais de pages web spécialement construites peut conduire à l'exécution de code arbitraire sur le système vulnérable.

Description

Plusieurs vulnérabilités ont été identifiées dans le gestionnaire de contenus Mambo. L'une d'elles est similaire à celle mentionnée dans l'avis CERTA-2007-AVI-274 concernant PHPMailer. D'autres sont des vulnérabilités permettant d'effectuer des injections indirectes de code (XSS).

L'exploitation de plusieurs de ces vulnérabilités par le biais de pages web spécialement construites peut conduire à l'exécution de code arbitraire sur le système vulnérable.

Solution

Se référer à la mise à jour du projet Mambo pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	N/A	N/A	les versions de Mambo antérieures à 4.6.3.

References

Title

Publication Time

Tags

Annonce de la publication Mambo version 4.6.3 du 24 décembre 2007	None	vendor-advisory
Site officiel du projet Mambo, et annonce de la version 4.6.3 du 24 décembre 2007 :	-	other
Document du CERTA CERTA-2007-AVI-274 du 20 juin 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "les versions de Mambo ant\u00e9rieures \u00e0 4.6.3.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "N/A",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans le gestionnaire de\ncontenus Mambo. L\u0027une d\u0027elles est similaire \u00e0 celle mentionn\u00e9e dans\nl\u0027avis CERTA-2007-AVI-274 concernant PHPMailer. D\u0027autres sont des\nvuln\u00e9rabilit\u00e9s permettant d\u0027effectuer des injections indirectes de code\n(XSS).\n\nL\u0027exploitation de plusieurs de ces vuln\u00e9rabilit\u00e9s par le biais de pages\nweb sp\u00e9cialement construites peut conduire \u00e0 l\u0027ex\u00e9cution de code\narbitraire sur le syst\u00e8me vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer \u00e0 la mise \u00e0 jour du projet Mambo pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-3215",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-3215"
    }
  ],
  "initial_release_date": "2007-12-27T00:00:00",
  "last_revision_date": "2007-12-27T00:00:00",
  "links": [
    {
      "title": "Site officiel du projet Mambo, et annonce de la version    4.6.3 du 24 d\u00e9cembre 2007 :",
      "url": "http://source.mambo-foundation.org"
    },
    {
      "title": "Document du CERTA CERTA-2007-AVI-274 du 20 juin 2007 :",
      "url": "http://www.certa.ssi.gouv.fr/site/CERTA-2007-AVI-274/index.html"
    }
  ],
  "reference": "CERTA-2007-AVI-566",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-12-27T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 identifi\u00e9es dans le gestionnaire de\ncontenus Mambo. L\u0027exploitation de ces derni\u00e8res par le biais de pages\nweb sp\u00e9cialement construites peut conduire \u00e0 l\u0027ex\u00e9cution de code\narbitraire sur le syst\u00e8me vuln\u00e9rable.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Mambo",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Annonce de la publication Mambo version 4.6.3 du 24 d\u00e9cembre 2007",
      "url": null
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2007-3215 (GCVE-0-2007-3215)

Vulnerability from cvelistv5

CERTA-2007-AVI-274

Vulnerability from certfr_avis

Description

Solution

CERTA-2007-AVI-566

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature